Webkit

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript s…CVE-2009-3933Webkit · 3.1% likely

   CWE-399

2. The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar) fol…CVE-2016-9643Webkit · 2.7% likely

   CWE-400

3. Off-by-one error in the WebSocketHandshake::readServerHandshake function in websockets/WebSocketHandshake.cpp in WebCore in WebKit before r56380, as used in Qt and other products,…CVE-2010-1766Webkit · 2.3% likely

   CWE-189

4. xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which a…CVE-2008-6059Webkit · 1.9% likely

   CWE-264

5. A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and…CVE-2023-39928Webkit · CVSS 8.8 · 1.4% likely

   CWE-416

6. JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file.CVE-2016-9642Webkit · 1.3% likely

   CWE-125

7. Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeatureCVE-2026-83596WebKit · CVSS 8.8 · 0.5% likely

   CWE-120

8. Webkitgtk: use-after-free of jscvalue function parametersCVE-2026-78376WebKit · CVSS 8.8 · 0.5% likely

   CWE-416

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.